Effective Day: June 4, 2025
This is the privacy policy (the “Privacy Policy”) of the Confederation of North, Central America and Caribbean Association Football ("CONCACAF") and its subsidiaries (collectively "CONCACAF", "we", "us"), which applies to this website and all other applications, services, and websites that link to this Privacy Policy (including, but not limited to, concacaf.com, WGoldCup.com, WGoldCup.org, GoldCup.org, ConcacafNationsLeague.com, and ConcacafW.com, WChampionsCup.com, ConcacafChampionsCup.com, ConcacafGo.com).
This policy reflects CONCACAF's values and commitment to privacy laws and data protection worldwide. We will always comply with local laws. If a country has specific requirements that restrict or alter how we process Personal Data that differs from what is stated in this policy, we will adhere to those local requirements.
This Privacy Policy explains how we collect, use, and share information that can identify a person, either directly or indirectly ("Personal Data"). It applies to the Personal Data we collect when you use our websites, apps, or services that link to this Privacy Policy (collectively referred to as our "Services"). Personal Data provided to us through any other means is also covered by this Privacy Policy. However, this Privacy Policy does not apply to:
- Human Resources Data and Business-to-Business Communications: This policy does not address how we handle Personal Data collected in the context of employment or Personal Data gathered in our communications with individuals who act as representatives of organizations with which we conduct business.
- Information Collected by Third Parties: This policy does not apply to information collected by organizations with which CONCACAF may collaborate, provided they are not acting as our service providers or business partners sharing Personal Data with us (“Third Parties”). For information on how Third Parties handle your Personal Data, please refer to their respective privacy notices and policies.
- Player and related persons privacy: This policy does not describe how the Personal Data of players and their associates (including match officials and club or national team staff) is processed by CONCACAF.
Please note:
- Our Services are not intended for use by children, and we do not knowingly collect Personal Data from individuals considered children under applicable national laws. Children should always ask a parent or guardian for permission to use our digital services. We recommend that parents and guardians clear their browser cache of cookies to minimize the Personal Data collected. If we discover that we’ve unintentionally collected data from a child, we will delete it.
- Our Services may link to websites or applications that we do not operate. We are not responsible for the practices of these Third-Party websites and applications.
Please take a moment to carefully read this Privacy Policy. By using our Services, as defined in our Terms and Conditions, you agree to the practices outlined here.
We may update this Privacy Policy occasionally. These updates or changes take effect when the policy is posted on our website. If we make significant changes to how we handle Personal Data previously collected, we will ask for your consent. If you do not consent, we will continue to use your data according to the privacy policy that was in place when that data was collected.
What We Collect and Why
The types of Personal Data we collect include:
- Identity Data such as your first name, maiden name, last name, username or similar identifier, marital status, date of birth, gender, and ID number.
- Contact Data such as your billing address, delivery address, email address, and telephone numbers.
- Financial Data, including your bank account details and payment card information. This information is collected by our partner financial institutions to process payments securely.
- Transaction Data such as details about payments made, as well as information on products and services you have purchased.
- Technical Data such as your internet protocol (IP) address, login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology used on your devices to access our Services.
- Profile Data such as your username and password, purchases or orders made, interests and preferences, feedback, and survey responses.
- Usage Data such as information about how you use our Services.
- Marketing and Communications Data such as copies of electronic communications, your preferences for receiving marketing materials from us and/or Third Parties, and your communication preferences.
- Cookie and Device Data Please refer to the Cookies and Analytics section for further details.
Additionally, Other Data may include photographs and competition entries you have provided.
We use your Personal Data to manage our Services, improve their delivery, and communicate effectively with you. Specifically, we handle Personal Data to plan and manage CONCACAF's business activities, track and analyze your preferences for marketing purposes, and process orders and accounts. We also use it to respond to inquiries, promote events and sponsors, allocate and sell tickets, create content, manage accounts and memberships, conduct research, ensure competition security, and defend individuals from social media abuse.
Furthermore, we send newsletters according to your communication preferences which provide information about our products, events, offers, and include personalized advertising materials, all while adhering to legal requirements. Finally, we notify you of any changes to our products and/or services.
Sharing Personal Data
There are a limited number of circumstances under which we may share some or all of the Personal Data we hold with others:
- For advertising purposes on social media and to personalize the advertising offered to you.
- With third-party service providers who process data on our behalf to deliver our Services.
- With our sponsors, promoters, broadcasters, and joint venture partners, provided we have obtained the necessary consent under applicable laws. This may include allowing them to contact you for marketing purposes, send event-related communications, provide information on their products or services, and conduct market research and promotional activities. It may also include measuring customer satisfaction through questionnaires, surveys, or opinion polls.
- We may offer services such as message boards, chat functionality, and blogs where you can post information and other materials. Please note that any information you disclose through these services becomes public and may be accessible to other users and the general public. We strongly encourage you to exercise caution when sharing Personal Data or other information. We are not responsible for the unauthorized use of any Personal Data you choose to disclose publicly through our Services.
- If required to comply with legal obligations or requests from public authorities.
- To prevent illegal or malicious activities, ensure safety, and enforce our Terms and Conditions that protect our rights, property, the rights and property of third parties, which include our partners and customers.
- In the event of a business asset sale or acquisition, where our data records are included as a part of the transaction.
- When you provide consent to share your data with other Third Parties.
In addition, we share anonymized, aggregated data, such as access statistics, with Third Parties, such as advertisers. This data does not provide for the identification of individuals.
Cookies and Analysis Tools
We may use cookies and other technologies to optimize your experience on the application or website, recognizing users upon return and customizing the content based on your preferences.
Data Choices and How to Submit Requests
Laws in certain U.S. states and other countries and regions grant data rights to individuals. Nevertheless, our policy is to offer the options described below to all users of our Services, free from discrimination as required by applicable privacy laws.
- Opting Out: You have the right to opt out of the sale or sharing of your Personal Data. To exercise this right, please submit your request by contacting us at privacy@concacaf.org. We do not engage in profiling (as defined by applicable privacy laws) or automated decision-making with legal or similar effects. Therefore, we do not offer an opt-out option for these activities. Depending on your location, laws outside the U.S. may grant you additional options to opt out of the use of your Personal Data. We are committed to honoring these laws, where applicable, to fully respect and protect your rights.
- Request a Report: You may request information on the categories of Personal Data we have collected and processed about you.
- Request Your Data: You may request access to your Personal Data in a structured, commonly used, and machine-readable format (access) and may request its transmission to another entity (portability).
- Request to Correct: You may request that we correct inaccurate or incomplete Personal Data about you.
- Request Deletion: You may request the deletion of your Personal Data. Once we process your deletion request, we may no longer be able to provide access to or support for our Services. Deleting your Personal Data will also unsubscribe you from all communications and may result in the removal of other information. You may re-subscribe to our communications at any time; however, this will not restore any data that has been permanently erased from our systems. We may need to retain certain information to comply with legal obligations or to protect our legitimate interests.
These choices are not absolute, and in some cases, we may decline a request as permitted by law. We generally do not charge fees for exercising the above choices; however, a reasonable fee may be charged for requests that are unfounded, repetitive, or excessive. If a fee is required, we will notify you and explain the decision before processing your request.
Submitting a Request: You may submit a request directly or authorize another party to do so on your behalf via the contact information provided below. To facilitate the request process, we ask that you submit your request by contacting us at privacy@concacaf.org.
Identity Verification: When you or an authorized agent make a request, we will verify your identity. We may contact you for additional information to confirm your identity. Information collected for verification purposes will only be used for that purpose.
Appeals: If you wish to appeal a decision related to a Data Choice Request, you may do so by contacting us at privacy@concacaf.org.
Security
